Index: base/crypto/encryptor_win.cc |
=================================================================== |
--- base/crypto/encryptor_win.cc (revision 81350) |
+++ base/crypto/encryptor_win.cc (working copy) |
@@ -1,115 +0,0 @@ |
-// Copyright (c) 2011 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-#include "base/crypto/encryptor.h" |
- |
-#include <vector> |
- |
-#include "base/crypto/symmetric_key.h" |
- |
-namespace base { |
- |
-namespace { |
- |
-// On success, returns the block size (in bytes) for the algorithm that |key| |
-// is for. On failure, returns 0. |
-DWORD GetCipherBlockSize(HCRYPTKEY key) { |
- DWORD block_size_in_bits = 0; |
- DWORD param_size = sizeof(block_size_in_bits); |
- BOOL ok = CryptGetKeyParam(key, KP_BLOCKLEN, |
- reinterpret_cast<BYTE*>(&block_size_in_bits), |
- ¶m_size, 0); |
- if (!ok) |
- return 0; |
- |
- return block_size_in_bits / 8; |
-} |
- |
-} // namespace |
- |
-Encryptor::Encryptor() |
- : key_(NULL), |
- mode_(CBC), |
- block_size_(0) { |
-} |
- |
-Encryptor::~Encryptor() { |
-} |
- |
-bool Encryptor::Init(SymmetricKey* key, Mode mode, const std::string& iv) { |
- DCHECK(key); |
- DCHECK_EQ(CBC, mode) << "Unsupported mode of operation"; |
- |
- // In CryptoAPI, the IV, padding mode, and feedback register (for a chaining |
- // mode) are properties of a key, so we have to create a copy of the key for |
- // the Encryptor. See the Remarks section of the CryptEncrypt MSDN page. |
- BOOL ok = CryptDuplicateKey(key->key(), NULL, 0, capi_key_.receive()); |
- if (!ok) |
- return false; |
- |
- // CRYPT_MODE_CBC is the default for Microsoft Base Cryptographic Provider, |
- // but we set it anyway to be safe. |
- DWORD cipher_mode = CRYPT_MODE_CBC; |
- ok = CryptSetKeyParam(capi_key_.get(), KP_MODE, |
- reinterpret_cast<BYTE*>(&cipher_mode), 0); |
- if (!ok) |
- return false; |
- |
- block_size_ = GetCipherBlockSize(capi_key_.get()); |
- if (block_size_ == 0) |
- return false; |
- |
- if (iv.size() != block_size_) |
- return false; |
- |
- ok = CryptSetKeyParam(capi_key_.get(), KP_IV, |
- reinterpret_cast<const BYTE*>(iv.data()), 0); |
- if (!ok) |
- return false; |
- |
- DWORD padding_method = PKCS5_PADDING; |
- ok = CryptSetKeyParam(capi_key_.get(), KP_PADDING, |
- reinterpret_cast<BYTE*>(&padding_method), 0); |
- if (!ok) |
- return false; |
- |
- return true; |
-} |
- |
-bool Encryptor::Encrypt(const std::string& plaintext, std::string* ciphertext) { |
- DWORD data_len = plaintext.size(); |
- DWORD total_len = data_len + block_size_; |
- |
- // CryptoAPI encrypts/decrypts in place. |
- std::vector<BYTE> tmp(total_len); |
- memcpy(&tmp[0], plaintext.data(), data_len); |
- |
- BOOL ok = CryptEncrypt(capi_key_.get(), NULL, TRUE, 0, &tmp[0], |
- &data_len, total_len); |
- if (!ok) |
- return false; |
- |
- ciphertext->assign(reinterpret_cast<char*>(&tmp[0]), data_len); |
- return true; |
-} |
- |
-bool Encryptor::Decrypt(const std::string& ciphertext, std::string* plaintext) { |
- DWORD data_len = ciphertext.size(); |
- if (data_len == 0) |
- return false; |
- |
- std::vector<BYTE> tmp(data_len); |
- memcpy(&tmp[0], ciphertext.data(), data_len); |
- |
- BOOL ok = CryptDecrypt(capi_key_.get(), NULL, TRUE, 0, &tmp[0], &data_len); |
- if (!ok) |
- return false; |
- |
- DCHECK_GT(tmp.size(), data_len); |
- |
- plaintext->assign(reinterpret_cast<char*>(&tmp[0]), data_len); |
- return true; |
-} |
- |
-} // namespace base |